Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
File: QnbajwSHyFCAm0qYcoysIXKycD0.mft (raw, json)
Hash identifier: S4fn/X8DdHN+9J09rM9ZOD/Mz+vNFvidcsnpwxNyt+Q=
Subject key identifier: AE:8F:C9:52:57:25:7D:39:E0:28:CC:E8:92:55:E0:92:6C:C9:16:9F
Authority key identifier: 42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
Certificate issuer: /CN=4276da8f0487c850809b4a98728cac2172b2703d
Certificate serial: 0198D472515C42026646EC64A4DA6A0CC252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:01:58 +0000
Manifest this update: Sat 23 Aug 2025 01:01:58 +0000
Manifest next update: Sun 24 Aug 2025 01:01:58 +0000
Files and hashes: 1: QnbajwSHyFCAm0qYcoysIXKycD0.crl (hash: WmBDxFzHnZcZ9IfEJct9TDS8GHrLrr8SWOpHFPm1nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:51:5c:42:02:66:46:ec:64:a4:da:6a:0c:c2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4276da8f0487c850809b4a98728cac2172b2703d
Validity
Not Before: Aug 23 01:01:58 2025 GMT
Not After : Aug 24 01:01:58 2025 GMT
Subject: CN=ae8fc95257257d39e028cce89255e0926cc9169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:df:30:78:53:da:3a:54:38:8e:44:08:1c:
b6:cc:94:93:74:c7:ad:2b:33:7a:ec:cc:e7:9d:3e:
73:e1:c5:2b:04:cb:bd:d5:97:42:b6:b1:ee:cd:90:
6d:24:e4:3a:eb:df:f4:92:4b:7a:0c:fb:c6:18:1c:
c0:7d:ae:ad:93:92:30:43:60:7a:bd:01:3c:d4:e1:
d1:f7:8a:17:d0:ac:9e:d3:df:66:a9:e5:31:d0:d0:
64:2f:d9:24:6a:62:f1:e8:9f:db:91:d3:36:69:1a:
ef:a2:a7:e9:2e:16:47:33:10:cd:04:d6:2b:9f:bc:
e2:e0:6b:66:46:28:19:8a:ac:63:b3:0c:82:1a:4f:
66:82:25:75:52:b4:bb:ae:59:08:76:fd:87:04:b2:
fb:72:08:70:6c:fb:a4:03:02:e0:34:80:87:bb:b3:
34:e9:0e:d9:26:88:60:be:ab:65:f9:49:46:53:90:
b2:3a:37:ce:90:40:5e:14:51:90:75:85:86:9d:25:
1d:f1:8f:c7:9d:7e:91:b0:99:fb:e6:75:0b:d9:c9:
71:cc:9a:98:c5:ba:b9:fd:2e:c8:1d:3d:8a:db:21:
b4:af:17:f5:b1:52:40:de:cd:e8:89:8e:33:92:cf:
96:8e:21:ac:74:8e:89:4a:6c:9d:0b:b2:86:35:80:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:C9:52:57:25:7D:39:E0:28:CC:E8:92:55:E0:92:6C:C9:16:9F
X509v3 Authority Key Identifier:
keyid:42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4b:8a:5b:19:d7:4b:ed:f3:41:8b:ec:08:e0:7b:89:e5:f1:
4e:02:be:c1:50:52:ca:83:33:06:30:64:17:ba:45:7c:a8:f1:
e5:1e:36:e3:4f:a3:2b:79:c4:e9:95:76:c6:e0:b6:cd:47:ee:
f0:dc:bc:07:d1:c7:b3:0b:8f:e2:05:f0:47:92:e9:92:a0:3d:
31:7d:72:d7:ac:dc:fb:0f:63:c7:86:fc:c3:0e:84:88:ec:34:
04:c0:cf:5d:cc:b8:68:83:eb:87:22:bd:44:52:10:82:b1:c5:
ff:ea:94:72:a2:d3:27:12:bb:af:94:42:50:c0:a5:c0:4c:95:
e4:0d:67:22:06:a0:c0:b7:a8:e4:b2:ad:17:f9:dc:a7:43:e6:
41:a8:dd:6a:d8:dd:3c:d5:a6:d2:ad:3c:7a:fc:85:f3:70:52:
1a:78:86:46:db:04:ee:75:76:d2:de:5b:7b:bf:f6:fc:b5:1e:
a8:20:e2:a5:c0:66:c9:88:06:2e:2f:39:3d:58:78:05:53:68:
bb:e8:a3:0e:75:e2:ad:85:b8:c6:8d:b3:70:ce:06:a6:73:95:
e2:61:50:dd:04:20:e6:75:d4:09:b9:43:97:a7:68:b0:ac:0c:
71:8a:df:98:ab:9e:a7:2e:af:7f:24:f6:1b:2a:38:f1:ab:f7:
18:c4:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:32 2025 by rpki-client